Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7C96130A043111EEA1E46862C4F9AE02.roa
File: 7C96130A043111EEA1E46862C4F9AE02.roa (raw, json)
Hash identifier: aPEX6PtLCF0tfw5KDn2VNNLP8+NdoxZi851FFAIHI9Y=
Subject key identifier: 53:A8:72:E1:70:45:0A:33:09:90:43:47:BE:52:91:B7:7C:FE:57:89
Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3
Certificate serial: 089B
Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7C96130A043111EEA1E46862C4F9AE02.roa
Signing time: Tue 06 Jun 2023 06:15:09 +0000
ROA not before: Tue 06 Jun 2023 06:15:09 +0000
ROA not after: Tue 30 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 139.190.52.0/22 maxlen: 24
139.190.112.0/22 maxlen: 24
139.190.116.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2203 (0x89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6134
Validity
Not Before: Jun 6 06:15:09 2023 GMT
Not After : Jul 30 00:00:00 2024 GMT
Subject: CN=647eceec-96bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4a:2a:e2:f6:a0:cf:4d:d4:1e:bf:52:dd:a2:
59:26:d5:27:7c:35:cc:88:ea:28:c9:d3:29:5b:9c:
4a:8e:7c:15:9e:07:a5:ae:bc:85:f8:b1:dd:54:33:
34:51:d4:84:a1:4a:d0:30:0f:e4:9c:40:58:9b:f3:
1f:f2:96:53:3c:04:7e:ec:57:c7:4b:bd:f6:98:c9:
2b:c4:4f:70:04:68:04:fa:94:a6:09:a9:b3:6e:36:
10:b8:59:59:6d:ed:84:76:2c:d1:b5:18:f9:35:83:
b3:35:4c:9a:5f:22:99:31:8c:11:13:db:db:5b:d3:
51:32:41:b5:4a:96:88:b4:8f:3f:14:32:ef:a4:fe:
6f:14:3d:86:4a:67:93:46:64:bd:45:93:a4:12:d4:
bd:34:c5:c7:35:b9:18:68:2a:a1:67:04:1b:2c:9a:
b7:6b:20:7d:ad:14:a2:27:77:71:23:65:31:7d:47:
cc:01:d5:81:3a:04:c7:2d:c1:6e:f6:a9:7b:6a:31:
5e:3f:9a:43:e4:24:11:c8:99:fd:06:03:98:c7:51:
a2:bf:fd:1c:bb:ed:d5:65:42:97:07:1f:30:c1:b9:
a4:31:be:6a:1e:2b:b7:10:ac:a6:94:12:bf:80:8c:
c9:97:7f:22:aa:16:4e:87:9f:a3:89:03:6d:56:4a:
b4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:72:E1:70:45:0A:33:09:90:43:47:BE:52:91:B7:7C:FE:57:89
X509v3 Authority Key Identifier:
keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/7C96130A043111EEA1E46862C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
139.190.52.0/22
139.190.112.0/21
Signature Algorithm: sha256WithRSAEncryption
57:99:20:9e:44:ee:e3:39:1a:be:f6:37:83:b0:91:74:86:d8:
90:e0:fe:d5:5f:a8:01:68:1b:af:a0:24:30:e7:52:64:c6:40:
14:a5:37:f4:0e:dd:a9:e6:1e:76:ec:45:9f:5d:cd:d3:b7:48:
4f:7a:11:ae:84:70:eb:3f:27:65:ec:9e:24:21:8e:fd:50:cd:
a7:f3:d0:47:52:84:8f:ad:3f:85:c2:be:6f:21:2e:ca:92:e5:
18:4e:b2:f3:21:e8:3e:6d:82:71:ac:f5:4d:34:de:64:da:2c:
16:a9:7a:78:04:a9:8f:d9:99:ac:c4:0a:68:e2:78:53:18:bb:
ec:60:66:10:96:0f:06:b2:7e:80:03:46:a8:6f:8e:f6:e1:5b:
5c:5a:ec:e1:ee:20:7d:15:7a:f5:54:1e:55:0e:b4:ff:c9:ae:
15:62:52:e9:d3:92:0c:39:f1:b6:aa:0a:53:7d:96:da:f2:9e:
a5:6d:f0:35:26:55:88:d4:29:37:b2:64:85:e2:ae:01:89:0e:
56:ca:b7:f0:b5:87:c6:49:91:e8:44:cb:2f:3b:80:15:d1:e7:
4e:ec:cf:a8:e2:2b:2f:90:ae:54:dd:c8:c8:9f:ac:13:a8:c1:
5e:30:81:6e:fa:cd:ef:7f:a6:ae:93:0c:59:0a:96:20:52:1e:
3f:0f:7b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:43:26 2025 by rpki-client